Which of the following provides the MOST relevant information to determine the overall effectiveness of an information security program and underlying business processes?

A. Balanced scorecard
B. Cost-benefit analysis
C. Industry benchmarks
D. SWOT analysis